Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS32181.roa
File:                     AS32181.roa (raw, json)
Hash identifier:          3KQQeiBfoyE0TxHr8qvWSJBkuQHmA4ruEdiLt9mR2aw=
Subject key identifier:   D4:54:EA:B8:81:09:F3:9E:1D:C1:C7:4A:9B:34:F8:36:D4:33:41:77
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       359BD03725AE94CE7833A5DF0466CD81579A3937
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS32181.roa
Signing time:             Thu 05 Sep 2024 14:05:20 +0000
ROA not before:           Thu 05 Sep 2024 14:00:20 +0000
ROA not after:            Thu 04 Sep 2025 14:05:20 +0000
asID:                     32181
IP address blocks:        89.116.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 02:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9b:d0:37:25:ae:94:ce:78:33:a5:df:04:66:cd:81:57:9a:39:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep  5 14:00:20 2024 GMT
            Not After : Sep  4 14:05:20 2025 GMT
        Subject: CN=D454EAB88109F39E1DC1C74A9B34F836D4334177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:65:a6:c9:09:7f:97:81:c6:16:95:6d:a5:
                    92:3d:0c:3d:99:e1:14:03:67:ea:18:ed:03:e4:1a:
                    71:68:66:39:e3:a4:c6:11:3a:d1:3b:f5:c9:63:5a:
                    35:08:41:32:c3:df:b1:5d:b6:b9:f9:b7:28:15:c3:
                    1c:8f:4b:fa:b6:6f:ff:1c:ea:7d:fd:ee:cf:3e:17:
                    8f:df:ef:2b:eb:ad:e2:71:88:94:a8:a4:1a:fc:e9:
                    7d:08:53:f2:82:9b:ed:9f:20:c1:89:d3:97:2c:5d:
                    ce:34:c8:04:0b:ff:da:2f:bb:92:f2:ed:49:18:f0:
                    60:23:21:7c:e1:71:9a:89:12:2e:18:17:65:82:03:
                    fa:c5:2e:74:94:d5:f6:a7:1d:83:ef:31:a0:7f:af:
                    3a:f1:cb:70:7f:c7:41:c1:bf:82:36:58:fe:c4:b9:
                    fb:53:ad:a5:20:d8:91:94:98:09:be:33:7d:2d:a3:
                    ac:9e:a4:cf:25:d5:3a:df:42:4d:32:b2:ae:e5:38:
                    f9:e3:92:a7:fa:a6:55:da:e5:43:b8:8e:c6:64:67:
                    60:51:96:9c:74:f6:6c:e5:56:13:af:99:ed:27:f1:
                    55:9c:0a:0f:7b:85:d2:f5:bf:dd:6e:33:bb:33:08:
                    4e:7f:04:c9:f4:50:14:e6:27:b0:c5:92:e7:76:90:
                    3a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:54:EA:B8:81:09:F3:9E:1D:C1:C7:4A:9B:34:F8:36:D4:33:41:77
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS32181.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:25:00:44:96:40:5c:06:2b:3f:a5:35:a4:47:68:24:b3:0d:
         62:0d:f7:5b:2a:da:0d:b5:32:03:62:e4:54:a6:ca:0a:7a:01:
         02:5f:c7:53:8f:8e:24:23:df:a4:3a:13:9d:1e:3e:84:2e:1a:
         83:94:db:37:17:74:a8:14:59:6d:aa:92:f1:75:d9:2c:7c:66:
         e2:52:53:4c:71:75:1c:29:4d:ba:b5:ee:38:de:4b:35:f2:8c:
         b1:13:d0:87:25:1a:a8:ff:d1:e7:16:d3:43:b9:c0:d7:20:a4:
         72:db:a0:39:03:8f:aa:ad:71:38:c4:88:69:b3:a0:84:27:32:
         dc:ab:92:e7:b4:17:fc:50:31:9f:e1:a2:c3:75:c2:f6:82:cf:
         af:71:60:6a:e3:14:d7:cc:04:21:ec:f4:72:0e:d4:a0:9c:72:
         c1:d8:ec:10:fd:a7:a7:31:11:d4:44:5c:8a:7c:25:2a:b7:44:
         19:4d:ec:12:26:b0:31:31:d8:d3:2d:6e:70:aa:67:5b:55:f2:
         92:5d:06:65:9f:14:79:7d:96:c1:91:fa:82:af:b8:05:f1:9d:
         db:5a:9c:4c:4e:3c:b9:e9:3e:b7:56:c9:76:4f:5a:2c:d5:81:
         46:c3:79:36:ab:fd:12:81:71:b7:d3:b9:b0:86:c4:d5:51:55:
         5c:0d:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:44 2024 by rpki-client on console-ams.rpki-client.org